Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ay_GWVxLQVSHticc5bqNX1L3Faw.roa
File: ay_GWVxLQVSHticc5bqNX1L3Faw.roa (raw, json)
Hash identifier: n6Do6/LbeGZ6Ku9b12t3BYBarxHy0AiwYQoI7+licOo=
Subject key identifier: 6B:2F:C6:59:5C:4B:41:54:87:B6:27:1C:E5:BA:8D:5F:52:F7:15:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83356F4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ay_GWVxLQVSHticc5bqNX1L3Faw.roa
Signing time: Wed 11 May 2022 23:15:02 +0000
ROA not before: Wed 11 May 2022 23:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201317196 (0x83356f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 23:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b2fc6595c4b415487b6271ce5ba8d5f52f715ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:06:d0:bf:84:24:90:17:0a:97:18:bd:08:
c9:93:c8:77:e2:30:4a:81:b5:f6:cb:ea:70:77:2d:
f7:98:bb:33:ce:db:89:38:13:02:e8:d5:a2:18:ff:
0c:4b:1d:e7:e3:50:d1:bf:e3:fc:86:8f:6a:1e:04:
aa:c4:c6:df:53:55:8b:fc:64:87:6b:73:1c:e0:12:
d6:f3:aa:ef:af:88:5b:b8:73:6c:f8:69:c9:60:fc:
4f:a1:f2:c4:0c:3c:fa:7b:72:63:58:b1:29:93:c2:
3e:19:23:ea:eb:42:a3:dc:fb:cb:f8:dd:b0:9f:46:
4c:24:41:2c:9a:7c:28:ba:49:22:16:01:1c:65:63:
10:e3:25:23:d6:70:a3:3d:64:79:e4:aa:aa:34:a1:
04:d4:a1:9d:84:06:00:dc:5d:29:04:f5:28:f4:b8:
20:7d:28:c6:5b:93:76:d2:6c:66:8c:9d:a1:00:67:
14:67:07:f5:31:7e:83:12:41:f3:b1:a0:3f:eb:37:
ec:9a:2d:f1:97:a4:1c:45:1f:43:ef:54:11:c3:95:
67:d8:fd:fb:3c:27:ad:c7:2f:67:b6:49:1f:f8:c1:
a6:f8:9d:d0:1c:41:59:6d:ed:07:53:ee:58:b8:af:
9a:9d:65:14:70:df:a3:66:5b:6f:f8:ea:ad:23:6b:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:C6:59:5C:4B:41:54:87:B6:27:1C:E5:BA:8D:5F:52:F7:15:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ay_GWVxLQVSHticc5bqNX1L3Faw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:e8:67:46:66:f1:af:8d:fa:e3:5e:b6:31:02:32:67:16:27:
25:ea:dc:b4:72:51:86:47:a0:ca:45:64:6c:6d:31:43:39:1e:
b9:e6:71:12:e8:70:84:a6:d1:98:67:b2:03:26:3f:bb:cd:8f:
7e:f7:19:aa:bc:d9:eb:65:a8:54:0f:2e:52:9a:0e:70:2a:7f:
19:02:c8:0e:80:e0:57:11:2f:f7:c8:48:c4:df:f5:41:74:c0:
ee:20:91:7c:09:9a:4c:4c:90:72:7b:3d:b6:a5:99:34:ba:e7:
cf:96:d4:2a:9e:cf:67:b6:17:d7:50:0c:09:cb:03:0b:30:37:
4d:44:4e:75:a1:c6:4c:11:35:ba:8e:17:1a:9f:4d:3a:e9:d7:
8e:5c:3d:8e:2b:cf:9e:46:15:b3:9e:bf:d5:09:30:05:c4:a7:
da:4e:4d:71:97:98:f0:21:5c:08:3d:4f:0b:6b:90:5b:1d:fd:
2e:db:ee:91:38:38:0c:9e:db:61:50:18:57:64:d5:d8:2b:c0:
64:ff:48:c2:71:cc:b1:79:55:94:ca:80:c9:44:e7:03:de:da:
28:2a:18:d5:f5:82:2d:c1:52:01:2a:21:ae:b6:01:d0:28:bc:
1a:da:ee:c9:66:6e:b4:d2:6c:bd:b8:43:c1:b8:16:ea:9d:ac:
77:23:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:55:23 2025 by rpki-client